Senior Security Engineer: DevSecOps & Offensive Testing

Davidson; City of Melbourne; On-site; AUD 100,000 - 140,000; Full time

Job summary

A leading energy sector company is looking for a Senior Security Engineer to uplift secure software development practices. This role involves embedding security into CI/CD pipelines, identifying vulnerabilities, and applying offensive security techniques. Candidates should have proven experience in penetration testing, strong knowledge of CI/CD security controls, and hands-on experience with security tooling. The position is crucial for integrating security practices within development and delivery pipelines, contributing to the organisation's digital transformation efforts.

Qualifications

• Proven experience in penetration testing and/or red teaming across web, mobile, APIs, and enterprise environments.
• Strong capability in identifying and exploiting vulnerabilities, with remediation strategies.
• Hands-on experience with security tooling and vulnerability management.

Responsibilities

• Embed security into CI/CD pipelines and perform hands-on testing.
• Apply offensive security techniques like penetration testing to uncover weaknesses.
• Work with engineering teams to integrate security tooling and strengthen practices.

Skills

Penetration testing

Vulnerability management

Scripting/automation

CI/CD security controls

DevSecOps principles

Tools

SAST

DAST

SCA

Azure

Job description

A leading energy sector company is looking for a Senior Security Engineer to uplift secure software development practices. This role involves embedding security into CI/CD pipelines, identifying vulnerabilities, and applying offensive security techniques. Candidates should have proven experience in penetration testing, strong knowledge of CI/CD security controls, and hands-on experience with security tooling. The position is crucial for integrating security practices within development and delivery pipelines, contributing to the organisation's digital transformation efforts.